Hi Luigi squid3 in stable is still affected by #696187: cachemgr.cgi denial of service.
Could you prepare an upload for CVE-2012-5643 and subsequent CVE-2013-0189 targeting stable-security for a DSA? Note that the initial patch was incomplete and the full fix is at [1]. [1]: http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2012_1.patch Regards, Salvatore -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org